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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 

WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )K Responsive to communication(s) filed on 03 April 2006 . 
2a)D This action is FINAL. 2b)E3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 1.4-16.18.19.21.22.25.26.28.30.33-45.47.48 and 50 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) |E) Claim(s) 1.4-16.18.19.21.22.25.26.28.30.33-45.47.48 and 50 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-1 52. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



1 . The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
04/03/06 has been entered. 

Claim Rejections - 35 USC § 102 

3. Claims 1 , 4-16, 18, 19, 21 , 22, 25, 26, 28, 30, 33-45, 47, 48, and 50 rejected 
under 35 U.S.C. 102(e) as being anticipated by Polizzi et al. (U.S. Pat. No. 6,643,661). 

4. Regarding claims 1 , 22, and 30, Polizzi disclosed a method and system for 
implementing security features at a portal server comprising receiving a first request 
from a client (see column 5, lines 1-17); in response to receiving the first request, 
authenticating the client (see column 5, lines 35-61; column 23, lines 2-24); consulting a 
database to determine access privileges of the authenticated client for interactions with 
a plurality of applications, wherein the applications are located at backend servers (see 
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column 5, lines 35-61 ; column 23, lines 2-24); generating code containing selectable 
interactions with the applications, wherein any authentication for the selectable 
interactions can be performed within the portal server (see column 4, lines 8-25; column 
5, lines 45-47); sending the code to the client (see column 8, lines 1-5; column 23, lines 
25-46); responsive to sending the code to the client, receiving a second request from 
the client, wherein the second request contains a selection of at least one of the 
selectable interactions (see column 2, lines 9-1 1 ; column 4, lines 5-8; column 5, lines 1- 
17; column 23, lines 47-59); determining from the selection a set of backend servers to 
process the second request (see column 23, lines 65-67); forwarding the second 
request to the set of backend servers (see column 24, lines 8-1 1 ); receiving results 
corresponding to the request from applications executing on the backend servers (see 
column 24, lines 12-16); and sending the results to the client, wherein sending the 
results to the client further comprises generating further selectable interactions (see 
column 24, lines 17-36); and sending the further selectable interactions with the results 
to the client (see column 24, lines 17-36). 

5. Regarding claims 4 and 33, Polizzi disclosed the method and system wherein the 
portal server is a Web server and the portal server comprises a portal application (see 
column 8, lines 1-54). 

6. Regarding claims 5, 25, and 34, Polizzi disclosed the method and system 
wherein the database comprises a plurality of generic objects, wherein each generic 
object contains the access privileges related to a user for the elements of the plurality of 
applications (see column 5, lines 43-47; column 23, lines 1-24). 
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7. Regarding claims 6 and 35, Polizzi disclosed the method and system wherein the 
access privileges indicate write access (see column 8, lines 39-54). 

8. Regarding claims 7 and 36, Polizzi disclosed the method and system wherein the 
database is in the form of a table (see column 5, lines 35-61; column 23, lines 2-24). 

9. Regarding claims 8 and 37, Polizzi disclosed the method and system wherein the 
code is in a form that can be rendered into a Web (see column 8, lines 1-17). 

10. Regarding claims 9 and 38, Polizzi disclosed the method and system wherein the 
form of the code is comprised of active code, wherein the active code can be executed 
on the client (see column 8, lines 1-17). 

11. Regarding claims 10 and 39, Polizzi disclosed the method and system wherein 
the selectable interactions correspond to operations within the applications (see column 
4, line 44 through column 5, line 17). 

12. Regarding claims 1 1 and 40, Polizzi disclosed the method and system wherein 
the selectable interactions correspond to resource related to the applications (see 
column 4, line 44 through column 5, line 17). 

13. Regarding claims 12 and 41 , Polizzi disclosed the method and system wherein 
the resources are selected from the group consisting of multimedia content, objects, 
files, attributes of objects, program elements, database objects, table entries (see 
column 4, line 44 through column 5, line 17). 

14. Regarding claims 13, 26, and 42, Polizzi disclosed a method and system 
comprising creating data structures corresponding to interactions with the backend 
application (see column 4, lines 8-25; column 5, lines 45-47); associating privileges for 
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each of the data structures, wherein the privileges can be fully checked at a portal 
application separately hosted from the backend application (see column 5, lines 35-61; 
column 23, lines 2-24); receiving a request from the portal application for reading the 
data structures (see column 6, lines 34-58); and sending the data structures to the 
portal application, wherein the interactions are operations that can be performed on the 
backend application and on resources related to the backend application, and wherein 
the backend application, the operations that can be performed on the backend 
application, and the resources related to the backend application are displayed on a 
single Web page on a client (see column 8, lines 1-54). 

15. Regarding claims 14, 27, and 43, Polizzi disclosed the method and system 
further comprising receiving a request for an interaction with the backend application 
from the portal application (see column 5, lines 1-17); processing the request without 
checking for privileges (see column 5, lines 43-59); and sending the results of 
processing the request to the portal server (see column 5, lines 1-17). 

16. Regarding claims 15 and 44, Polizzi disclosed the method and system wherein 
the data structures are data objects (see column 5, lines 61-67). 

17. Regarding claims 16 and 45, Polizzi disclosed the method and system wherein a 
representation of the data structure is from the group consisting of a relational 
database, and XML document and a class (see column 4, lines 19-25; column 5, lines 
61-67). 
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18. Regarding claims 18 and 47, Polizzi disclosed the method and system wherein 
the interactions relate to resources associated with the background application (see 
column 4, line 44 through column 5, line 1 7). 

19. Regarding claims 19, 28, and 48, Polizzi disclosed a method and system 
comprising authenticating with a portal server (see column 5, lines 35-61; column 23, 
lines 2-24); receiving a list of applications and interactions that can be performed with 
the applications from the portal, wherein the applications are stored at backend servers 
that are different from the portal server (see column 8, lines 1-5; column 23, lines 25- 
46); selecting an interaction (see column 4, lines 21-25); and receiving results based on 
the selection of the interaction without authenticating with the backend servers, wherein 
receiving the results further comprises receiving a set of further interactions selectable 
by the client computer, wherein the portal server performs all necessary authentications 
of the client computer, and wherein the backend servers avoid any authentication of the 
client computer (see column 24, lines 17-36). 

20. Regarding claims 21 and 50, Polizzi disclosed the method and system wherein 
authenticating, receiving the list, selecting, and receiving results are at a Web browser 
(see column 4, lines 15-25). 



Response to Arguments 

21. Applicant's arguments with respect to claims 1,4-16, 18, 19,21,22,25,26,28, 
30, 33-45, 47, 48, and 50 have been considered but are moot in view of the new 
ground(s) of rejection. Examiner submits that the newly amended claims limitations are 
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taught by the prior art of record as detailed in the above rejection under 35 U.S.C. 
102(e). In general, Polizzi teaches the claim limitations argued by Applicant such as 
"sending the further selectable interactions with the results to the client, where the 
results were received by the portal server from an application executing on the backend 
servers" (see column 24, lines 17-36), "the operations that can be performed on the 
backend application are displayed on a single Web page" (see column 8, lines 1-54), 
"the portal server performs all necessary authentications of the client computer, and 
wherein the backend servers avoid any authentication of the client computer" (see 
column 5, lines 35-61; column 23, lines 2-24), and "receiving a request for an interaction 
with the backend application from the portal application" (see column 4, lines 21-25). 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Inala et al. (U.S. Pat. No. 6,199,077) 
Fisher (U.S. Pat. No. 6,957,199) 
Rajan et al. (U.S. Pat. No. 6,725,425) 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Joseph R. Maniwang whose telephone number is (571 ) 
272-3928. The examiner can normally be reached on Mon-Fri 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William C. Vaughn can be reached on (571) 272-3922. The fax phone 
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number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

JM 



WILLIAM C. VAUGHN JR 



